CVE-2018-5512: High severity F5 Big-ip Local Traffic Manager vulnerability
On F5 BIG-IP 13.1.0-13.1.0.5, when Large Receive Offload (LRO) and SYN cookies are enabled (default settings), undisclosed traffic patterns may cause TMM to restart.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
F5 BIG-IPto a version that resolves this vulnerability.Fixed in 13.1.0.5 - Configuration
Disable Large Receive Offload (LRO) to avoid TMM restarts when undisclosed traffic patterns occur while LRO and SYN cookies are enabled (default settings).
F5 BIG-IP TMM Large Receive Offload (LRO) = disable - Configuration
Disable SYN cookies to avoid TMM restarts when undisclosed traffic patterns occur while LRO and SYN cookies are enabled (default settings).
F5 BIG-IP TMM SYN cookies = disable
Event History
Frequently Asked Questions
What is CVE-2018-5512?
CVE-2018-5512 is a vulnerability found in F5 BIG-IP 13.1.0-13.1.0.5 that may cause TMM to restart when specific traffic patterns are detected.
How does CVE-2018-5512 affect F5 BIG-IP?
CVE-2018-5512 affects F5 BIG-IP 13.1.0-13.1.0.5 when Large Receive Offload (LRO) and SYN cookies are enabled.
How severe is CVE-2018-5512?
CVE-2018-5512 has a severity rating of high with a score of 7.5 out of 10.
How can I fix CVE-2018-5512?
To fix CVE-2018-5512, update your F5 BIG-IP software to version 13.1.0.6 or later.
Where can I find more information about CVE-2018-5512?
You can find more information about CVE-2018-5512 on the following websites: [1] SecurityFocus [2] SecurityTracker [3] F5 support.